Private evals from Vercel put hard numbers on the Kimi K3 hype, and specifically on security work. Guillermo Rauch reported that on internal “stealth” evals K3 is top-tier at cyber tasks with real “raw IQ,” GPT-5.6 Sol is a clear leap ahead but far costlier, and Fable “refuses everything” — they couldn't get it to complete the run at all. The through-line: an open-weight Chinese model has reached the cyber frontier, and US safety guardrails now read as a competitive liability rather than a moat — the same tension in HuggingFace's breach report above.

Vercel's Malte Ubl framed K3 as the price/recall/precision workhorse against a private vuln-finding harness, the summary landed as open weights hitting the cyber forefront, Cline's head-to-head on a real repo bug showed Fable faster but K3 cheaper, and even an OpenAI staffer publicly corrected his earlier Kimi take.

Computer-use agents crossed from demo to chore, with Codex driving real GUIs end-to-end. Rhys Sullivan handed it a plain-language goal — “move all my 2FA out of Google Authenticator into 1Password, preferably as passkeys” — and it just worked. The pattern people kept hitting: when there's no API, the agent reaches for the mouse, and that unlocks a long tail of messy real tasks nobody wanted to script.

Ethan Mollick had it install Blender from scratch and animate a 3D otter, Peter Steinberger watched it wrangle the macOS file picker to upload a PR image, and Akshay Pachaar shipped an open-source coding harness to explain the plumbing underneath.

The week's clearest “patch today” item: CVE-2026-63030 (“wp2shell”), a pre-auth remote code execution chain in WordPress core, went public with working PoCs. Aseem Shrey reproduced it end-to-end — a nested /batch/v1 “double confusion” bug chained into a WP_Query SQLi (CVE-2026-60137) to land an anonymous shell on a stock install — and noted he built the exploit with Opus 4.8 orchestrating Sonnet agents: “exploit dev has gotten scary easy.” It's fixed in WordPress 6.9.5 / 7.0.2, so if you run WordPress, update now.

Dark Web Informer summarized the CVE and credited the original research, Nicolas Krassas pushed the RCE into a public lab, and another researcher had Claude generate a working PoC in about ten minutes.

The homelab-inference conversation shifted from “can you” to “for how little.” A widely shared teardown stacked four Intel Arc Pro B70s (32GB each, ~$1,000 street) into one chassis for 128GB of local VRAM at about $4,000 — benchmarked at roughly 2x a same-price NVIDIA DGX Spark. The anticipation is pointed straight at Kimi K3: once its weights hit HuggingFace on July 27, people expect a rush to self-host it fast.

a single RTX 4090 now runs Gemma 4 31B at 190K context, the crowd is bracing for a K3 self-hosting gold rush, and — hype aside — the “rack of Mac minis runs the business” genre kept spreading.

A widely reshared clip of Moonshot/Kimi CEO Zhilin Yang gave the agent debate a sharp thesis: “Claude didn't win on reasoning — they bet everything on agents, but the layer everyone skips is that a great agent needs a great base model, and that's all we do at Kimi.” His framing — the smartest agent still fails if you can't configure it, and the real goal is “K2 helps build K3” — landed as a counter-narrative to the reasoning-first story of the past year.

It dovetailed with a more technical thread on prompt injection against persistent agent memory in Claude Code and Codex, a reminder the scaffolding everyone is racing to build is also a fresh attack surface. Meanwhile Zack Korman pushed back on the “Chinese models are uniquely dangerous” framing, and a popular reading list pointed to Simon Willison's measured K3 write-up.

One of the day's biggest local-tool posts: a new open-source OCR model, Unlimited-OCR, at just 3B params that runs locally and parses an entire 100-page PDF in a single pass. Instead of chopping a document into pages and losing the thread, it does one-shot “long-horizon” parsing within a 32K context, is multilingual out of the box, and claims 93% on the standard parsing benchmark (+6 over the previous baseline). A genuinely useful, self-hostable document tool rather than another chatbot.

Siqi Chen shared a concrete cross-model workflow that resonated: have Fable write a plan, then tell it to “get second opinions from Codex CLI using GPT-5.6-Sol at max effort and Kimi CLI using Kimi 3, revise the plan with any sound findings, and repeat until convergence or up to 5 rounds.” It's a tidy example of the emerging pattern of orchestrating several frontier CLIs against each other for planning, rather than betting a task on a single model.

On the video side, Seedance 2.0 arrived on Higgsfield AI with an unusual twist: they open-sourced the entire recipe — prompts, references and generation settings — behind their Originals, so creators can inspect the exact workflow behind a given cinematic shot, from first prompt to final settings. It fits this week's larger shift in AI video from one-off clips toward controllable, repeatable production you can actually reverse-engineer.